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ABSTRACT OF THE DISCLOSURE 

A dynamic delegation method. First, a set of 
delegation policies are provided as general rules for 
limiting delegation. Next, two kinds of data are 

5 received, including a delegation condition and a 
delegation approval submitted by a grantor for vesting 
authority of the grantor's role to a grantee, wherein the 
grantor's role is granted the authority to access a set 
of data. Next, consequent authority actually vested to 
10 the grantee is determined based on the delegation 
approval, the delegation condition and the delegation 
policies . 
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